Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db0f5cf-592d-42af-ad88-42edb9ceb3bd/f400fc35-418e-3815-a1d3-5f6eab8e98d8.roa
File:                     f400fc35-418e-3815-a1d3-5f6eab8e98d8.roa (raw, json)
Hash identifier:          cD/7W+jlYr3MR6ch1ZEPgUuT0CtatA8iy7x/xHdGjsg=
Subject key identifier:   BE:C6:B7:9F:35:39:1E:FC:99:52:32:B5:F8:49:73:0D:D3:6E:F9:B8
Certificate issuer:       /CN=7db0f5cf-592d-42af-ad88-42edb9ceb3bd
Certificate serial:       010D0C9F4328583EC5A9A8A47EDB080268141BB0
Authority key identifier: 13:AA:4E:D6:38:1A:E6:31:C0:E1:F5:D6:FC:DC:FD:87:46:A2:3C:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db0f5cf-592d-42af-ad88-42edb9ceb3bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db0f5cf-592d-42af-ad88-42edb9ceb3bd/f400fc35-418e-3815-a1d3-5f6eab8e98d8.roa
Signing time:             Tue 02 Aug 2022 15:17:40 +0000
ROA not before:           Tue 02 Aug 2022 15:17:40 +0000
ROA not after:            Mon 04 Nov 2024 05:00:00 +0000
asID:                     20398
IP address blocks:        74.116.138.0/24 maxlen: 24
                          199.47.68.0/24 maxlen: 24
                          199.47.71.0/24 maxlen: 24
                          208.72.24.0/24 maxlen: 24
                          208.72.25.0/24 maxlen: 24
                          208.72.24.0/22 maxlen: 22
                          208.72.26.0/24 maxlen: 24
                          208.72.27.0/24 maxlen: 24
                          199.47.69.0/24 maxlen: 24
                          199.47.68.0/22 maxlen: 22
                          199.47.70.0/24 maxlen: 24
                          74.116.136.0/24 maxlen: 24
                          74.116.136.0/23 maxlen: 23
                          74.116.137.0/24 maxlen: 24
                          74.116.136.0/21 maxlen: 21
                          74.116.139.0/24 maxlen: 24
                          74.116.138.0/23 maxlen: 23
                          74.116.140.0/24 maxlen: 24
                          74.116.141.0/24 maxlen: 24
                          74.116.142.0/24 maxlen: 24
                          74.116.143.0/24 maxlen: 24

Validation:               Failed, certificate revoked

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3e:c5:a9:a8:a4:7e:db:08:02:68:14:1b:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7db0f5cf-592d-42af-ad88-42edb9ceb3bd
        Validity
            Not Before: Aug  2 15:17:40 2022 GMT
            Not After : Nov  4 05:00:00 2024 GMT
        Subject: CN=88592a28-274e-4fbf-a86c-5298f85ff26e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:54:9e:d1:9c:e1:e9:4f:cd:36:d1:eb:d4:03:
                    ee:e3:c4:54:fe:8a:8f:1c:6c:ad:44:51:30:be:09:
                    3f:b9:49:b6:84:75:f2:cd:f8:88:eb:50:a3:aa:11:
                    8c:54:bb:52:41:02:ac:7d:46:c2:b6:d4:0c:36:61:
                    b3:85:a9:18:fe:f4:23:16:45:b7:81:8a:41:4a:46:
                    e7:e0:f4:b2:37:c1:e9:dc:fe:64:ab:2a:82:1d:0c:
                    c5:0e:89:4d:b9:20:c0:3e:2c:3c:47:a0:2d:dc:ef:
                    8d:4a:2c:d6:ae:ff:a9:ea:f0:bc:fb:77:ba:e8:4d:
                    6c:9d:47:f4:c1:40:5d:4a:84:c4:e1:14:85:1d:fb:
                    e8:9a:b8:08:40:9d:fd:b8:04:0b:1a:b1:13:03:bf:
                    1f:da:2f:3e:3d:23:c1:6b:91:b1:17:72:02:ad:9a:
                    e0:da:03:10:4e:c4:c5:44:4f:9b:49:4c:92:1c:4b:
                    1c:b2:92:f7:e1:9a:af:96:ae:d2:66:4a:71:2e:6d:
                    61:ed:45:e3:d1:ba:85:d2:78:a2:05:a7:b8:0d:70:
                    cf:48:ac:07:43:d5:3f:e3:a3:59:72:2f:ff:e6:4b:
                    3e:6f:68:bc:62:0b:90:76:2b:af:96:88:a2:42:f8:
                    6d:11:3a:09:52:f1:e4:c9:46:f1:a3:a2:6d:d6:d2:
                    64:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C6:B7:9F:35:39:1E:FC:99:52:32:B5:F8:49:73:0D:D3:6E:F9:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db0f5cf-592d-42af-ad88-42edb9ceb3bd/f400fc35-418e-3815-a1d3-5f6eab8e98d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db0f5cf-592d-42af-ad88-42edb9ceb3bd/7db0f5cf-592d-42af-ad88-42edb9ceb3bd.crl

            X509v3 Authority Key Identifier:
                keyid:13:AA:4E:D6:38:1A:E6:31:C0:E1:F5:D6:FC:DC:FD:87:46:A2:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/7db0f5cf-592d-42af-ad88-42edb9ceb3bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.116.136.0/21
                  199.47.68.0/22
                  208.72.24.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:2d:f5:07:0f:03:fd:81:05:e4:34:62:f3:ce:87:17:e8:02:
         b1:94:62:eb:54:d4:56:68:98:98:4e:bd:54:43:d4:48:bd:34:
         8c:e6:0b:1c:7e:c4:a6:80:17:5d:9c:1d:2b:d4:13:dd:a7:d2:
         56:65:e0:d5:84:29:37:7c:65:11:aa:02:0c:e1:19:95:8e:32:
         ca:cc:0c:94:a0:a1:38:ca:e5:ef:f1:95:91:60:30:c8:6c:ab:
         b0:fa:99:97:93:ba:4f:f0:06:36:f2:0f:f9:14:99:59:7f:b2:
         57:38:0c:e4:8c:9b:5b:6f:cc:7e:30:b1:67:bd:bc:37:19:dc:
         74:71:2d:23:80:9e:73:e7:78:e0:32:8b:37:fd:aa:bc:7a:b9:
         45:da:3f:ab:97:81:21:fe:71:22:4c:29:3a:a4:34:b5:be:0c:
         3c:4b:97:1c:70:0c:21:7d:13:97:13:15:11:70:ae:be:2d:0b:
         72:a5:d7:20:65:3c:50:03:06:5a:9f:f7:e6:d7:da:19:c4:47:
         a4:de:00:86:6e:a3:5b:00:7e:69:fc:c4:42:02:df:a2:74:bb:
         5a:d4:80:5c:5c:ef:0a:f9:14:f1:e9:c9:f0:f1:ed:d2:be:8a:
         48:fa:8a:59:79:e7:03:2f:96:b4:c9:47:7b:a5:ff:e2:a0:d2:
         0e:b1:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:23:19 2023 by rpki-client on console-fra.rpki-client.org